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Abstract — In a relativistic theory of quantum information, the 
possible presence of horizons is a complicating feature placing 
restrictions on the transmission and retrieval of information. 
We consider two inertial participants communicating via a 
noiseless qubit channel in the presence of a uniformly accelerated 
eavesdropper. Owing to the Unruh effect, the eavesdropper's view 
of any encoded information is noisy, a feature the two inertial 
participants can exploit to achieve perfectly secure quantum 
communication. We show that the associated private quantum 
capacity is equal to the entanglement-assisted quantum capacity 
for the channel to the eavesdropper's environment, which we 
evaluate for all accelerations. 

Quantum information theory for the most part assumes 
that the senders, receivers and eavesdroppers involved 
in a protocol share an inertial frame. For many of the appli- 
cations envisioned in the field this is a good approximation 
and sometimes, as in the case of quantum key distribution, 
even a rigorously justifiable simplification. To the extent that 
quantum information theory attempts to identify fundamental 
rules governing information processing imposed by the laws of 
physics , however, neglecting relativity is ultimately unaccept- 
able. Luckily, much of the formalism of quantum information 
remains valid in relativistic settings and the effect of changing 
reference frames can usually be modeled as the introduction 
of noise. Thus, there has been a significant amount of work 
done to calculate how entanglement degrades under a boost 
or acceleration [1], [2], [3], [4], [5], [6] and how basic 
quantum information theoretic protocols like teleportation, 
which were designed for inertial participants, break down 
under acceleration [7]. 

The natural next step is to design communications protocols 
specifically adapted to relativistic situations and, possibly, 
take advantage of uniquely relativistic features to accomplish 
otherwise impossible tasks. Kent has demonstrated, for exam- 
ple, that secure bit commitment is possible using a protocol 
exploiting relativistic causality constraints even though it is 
known to be impossible otherwise [8]. In this article, we con- 
sider a scenario in which two inertial participants communicate 
via a noiseless, bosonic, dual-rail qubit channel in the presence 
of a uniformly accelerated eavesdropper. In this context, the 
eavesdropper's Unruh noise becomes a resource which the 
inertial participants can potentially exploit to encrypt their 
communications. 

The private quantum capacity is the optimal rate at which 
a sender (Alice) can send qubits to a receiver (Bob) while 
keeping them private from an eavesdropper (Eve). It had 
not previously been studied because in most settings it is 
redundant to require privacy in quantum communication: if 
the eavesdropper is modeled as being part of the environment 
of the communications channel then quantum communication 
is automatically private. This was in fact the insight behind 
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Devetak's proof of the quantum capacity theorem [9]. On the 
other hand, if Eve is assumed to have unrestricted access to 
the states while they are in transit from Alice to Bob, then 
unconditional privacy is impossible without secret keys in a 
nonrelativistic model because Eve and Bob are effectively 
interchangeable. This symmetry is broken, however, if Eve 
is assumed to be accelerating. The private quantum capacity 
problem therefore provides an example of a question which is 
poorly motivated in non-relativistic settings but very natural 
when relativity is taken into account. Because of structural 
features of the Unruh effect, this private quantum capacity 
is exactly zero if Alice is restricted to isometric encodings. 
However, for general encodings it is given by the same formula 
as the entanglement-assisted quantum capacity [10] of the 
channel to the eavesdropper's environment, despite the absence 
of any operational connection between the two problems. Of 
course, it is also possible to define a private classical capacity 
for this setting, which we study for the purposes of comparison 
with its quantum version. 

I. Unruh channels 

The Unruh effect, whereby an observer uniformly acceler- 
ated in a vacuum experiences a thermal bath [11], [12], can 
be understood as a consequence of the fact that an accelerated 
observer has a different Fock representation of the quantum 
field than does an inertial observer. In particular, the vacuum 
state as defined by an inertial observer will be a thermal state 
in the Fock space defined by a uniformly accelerating observer. 
The transformation between these Fock spaces is conveniently 
represented by a transformation of creation and annihilation 
operators called a Bogoliubov transformation [13]. 

Consider a state of a quantum field. The inertial 
observers may see this as a many particle state: IL;af |vac). 
The Bogoliubov transformation changes each a; to some 
combination of the creation and annihilation operators of the 
non-inertial observer's Fock decomposition. In our case, the 
Bogoliubov transformation, which relates the Fock decomposi- 
tions in the Minkowski and Rindler spacetimes corresponding 
respectively to the inertial and accelerating observers, has a 
very special form because of the spacetime symmetries. The 
only mixing of modes is between the modes with the same 
momentum in the two Rindler wedges. The Unruh channel Af 
consists of this change composed with tracing over the modes 
that are inaccessible to the accelerating observer because they 
are beyond her horizon. 

We will assume that Alice encodes information for Bob 
by preparing quantum states of a bosonic, dual-rail qubit 
as illustrated in figure [T] In other words, she has access 
to a two-dimensional sector of her (and Bob's) Fock space, 
with basis vectors given by a single excitation of a massless 
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Fig. 1. Spacetime diagram of the communication scenario. Alice and Bob are 
inertial observers, assumed without loss of generality to be at rest. Meanwhile, 
Eve is uniformly accelerated resulting in future and past horizons indicated 
by the dashed lines x = ±t. Eve intercepts a message sent from Alice to 
Bob but will be thwarted in her attempts to determine the contents even 
though the only restrictions considered on Eve's ability to perform quantum 
measurements are those arising from the presence of the horizons. 



scalar field in one of two different modes, which we label 
by their associated annihilation operators a and 60 U ac (r) = 



exp[r(aJc> 



is the unitary operator transforming the 



sector of Alice's Fock space to the corresponding sector of 
Eve's Fock space. (Because the Bogoliubov transformation is 
diagonal, we can safely ignore all other modes [16, p. 106].) 
In short, the channel is U ac followed by the appropriate trace. 
The parameter r is related to Eve's proper acceleration r and 
the mode frequency oj by tanhr = exp (—hlo/t) [7], [13]. 

In our dual-rail case, an arbitrary pure input state = 
(ab'+fta') |vac) is transformed to Eve's Fock space according 
to Uabcd = U ac Ubd, which expands to 



U a bcd(r) 
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For all states in the dual-rail basis, equation (Q]) reduces 

to U a bcd{r) = 1/ cosh 3 r exp [tanh r(a i c ( + tfcft)]. This al- 
lows us to write the state in Eve's Fock space as |«/>) = 
U ab cd(r){atf + /3at) |vac) = (a&t + (3a^U abc d(r) |vac>. If 
we trace over degrees of freedom beyond Eve's horizon (cd), 
then a = Af(\ip){ip\) = (1 — z) 3 z k Ok is block diagonal 

with blocks labeled by the total excitation number k 



'Throughout the paper, we work with plane wave modes which are 
not, strictly speaking, physically realizable. Nonetheless, the superpositions 
involved in defining a wave packet can be carried through our calculations 
using approximate mode matching because the Bogoliubov transformation 
does not mix modes. As a result, explicit calculations using wave packets do 
not lead to substantial differences for our purposes [14], [15]. 
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Each block cr*. can be expressed as a linear combination of 



generators Jx"^', Jy k+Z> and ji fc+2 ' ) of the irreducible (fc + 
2)— dimensional representation of SU(2). (J^ 2 \ for example, 
consists of the Pauli matrices scaled by 1/2.) If a = Af(p) 
with p = 1/2 + n ■ J' 2 ' arbitrary, then 

a k = \(k + l)/2 + n x 4 k+ V + n y j( k+ V + n z jf^ . (3) 

As a consequence, the channel Af to Eve is covariant in the 
sense that Af(UpW) = R(U)N(p)R{W) where R is the 
infinite dimensional representation of SU(2) given by the 
direct sum over all its finite dimensional irreps. This makes 
it easy to diagonalize er: the eigenvalues of a k are equally 
spaced with spacing S = ||n||a and largest eigenvalue equal 
to (fc + l)(S + l)/2. 

II. Private quantum capacity 

Capacities are defined by allowing arbitrarily many uses of 
a channel and asking that the various data transmission or pri- 
vacy requirements hold to any desired level of approximation 
in the limit of many uses. The private quantum capacity is 
defined as the optimal rate at which Alice can send qubits to 
Bob while simultaneously ensuring that those qubits appear 
to be completely encrypted from Eve's point of view. There 
are several equivalent ways of formalizing this notion, but 
we will take it to mean that Alice would like to transmit 
halves of entangled pairs to Bob. Privacy in this context means 
that there should be no correlation between the output of 
Eve's channel and the halves of the entangled pairs kept in 
Alice's laboratory. Since the private quantum capacity has not 
been studied elsewhere, we begin by providing some formal 
definitions and studying the general case. 

Given are a quantum channel Afi from Alice to Bob 
and another A/2 from Alice to Eve. Let $ 2 fc represent the 
density operator of k maximally entangled pairs of qubits and 
r 2 fc the maximally mixed state on k qubits. An (n,k,5,e) 
private entanglement transmission code from Alice to Bob 
consists of an encoding channel £ taking k qubits into 
the input of A/"®" and a decoding channel D taking the 
output of Bob's channel Mf n back to k qubits satisfying 

1. Transmission: 

||(id«)I?oAAf ,l o£:)($ 2fc )-$ 2fc || 1 <S. 

2. Privacy: 

|| (id ®A^ n o £) ($ 2 ,. ) - r 2k ® {Nf n o S)( T2k ) II x < e. 

A rate Q is an achievable rate for private entanglement 
transmission if for all 5, e > and sufficiently large n 
there exist (n, [nQ\ , 8, e) private entanglement transmission 
codes. The private quantum capacity is the supremum of the 
achievable rates. For a density operator a AB , let H(A) a be 
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the von Neumann entropy of a A . The mutual information 

I{A; B) a is H{A) a + H(B) a - H{AB) a . 

Theorem 1 The private quantum capacity Q p (id,J\f) when 
the channel from Alice to Bob is noiseless is given by the 
formula max \l{A] E c ) p , where the maximization is over all 

pure states \<p) AA and p = (id <g>J\f c )((p). M c is the channel 
to Eve 's environment E c , that is, the complement of M with 
respect to its Stinespring dilation. 

Despite the absence here of any entanglement assistance, 
the theorem implies that Qp{i&2,N) is exactly equal to the 
entanglement-assisted quantum capacity of J\f c , usually written 
Q E (K) [10]. 

To see that the advertised rate is achievable, write Vg for 
the Stinespring extension of £, with output on A n F. The 
privacy condition applied to N is equivalent to entanglement 
transmission to FE^ via Uhlmann's theorem [17]. It is 
therefore sufficient to find codes that simultaneously perform 
entanglement transmission to Bob and to FE". The encodings 
analyzed in [18] do not depend on the channels, however, just 
the dummy input ip, so the same encodings can be employed 
for both tasks. Choosing |F| = 2 n \ the following sufficient 
conditions for successful transmission can be extracted from 
[18], [19]: 

Q<H(A) v -f and Q < I(A)E C ) P + f, (4) 

where I(A)E c ) p is the coherent information H(E c ) p — 
H(AE c ) p . These constraints have intuitive interpretations: the 
first is the noiseless rate to Bob through Vg reduced by the rate 
at which qubits are lost to F, while the second is the standard 
coherent information rate for Af c augmented by a noiseless 
channel to F. Q is maximized subject to these constraints 
when H(A) V - f = I(A)E C )„ + f. Using the fact that 

AE E 

H(A) V = H(A) p and purifying p to \p) c , this equation 
can be written as / — \I(A; E) p . Therefore, the rate Q is 
achievable provided Q < H{A) P - \l(A; E) p = \l{A\ E c ) p . 

To prove optimality, suppose we have an (n, [nQ\ , 5, e) 
private entanglement transmission code. Use R to denote the 
reference space for the maximally entangled state <5> 2 fc in the 
definition. Let \a) RFE E " be the purified final state after 
Mf n o £ has acted on <3? 2 fc - The privacy condition and the 
Alicki-Fannes' inequality [20] imply that there is a function 
g(5) satisfying lim^o g(S) = such that 

2 lnQ\ = 21og | R\ < I(R; E[ l F) a + ng{5) (5) 

= I(R;F) a +I(R;E?\F) a 

< I(R;E?\F) a +ng(5 + e) 

< I(RF;E2) a + ng{8 + e). 

The first inequality is a consequence of the existence of the 
decoding channel T> and the monotonicty of mutual infor- 
mation. The second inequality holds because entanglement 
transmission to Bob requires no leakage to F, leading to an 
upper bound on I(R;F) a . The final inequality follows from 
the chain rule and the nonnegativity of mutual information. 
Labeling RF by A, we can conclude that 

Q p (id,A0 < lim max^-/(i;£ , ") p , (6) 



where the maximization is pure states \<p) and p = 

(id <E>Af® n )(<p)- It is well-known, however, that fixing n = 1 
does not affect the expression on the right hand side of the 
inequality [10], finishing the proof of optimality. 

A. Unruh case 

Let us now focus on the the case where J\f is the Unruh 
channel. Inspection of figure[TJreveals that there is only a finite 
amount of time during which Eve can intercept messages from 
Alice to Bob. The limit n — > oo of infinite length messages 
considered in the definition of the private classical capacity 
therefore does not formally apply, but codes nearly achieving 
the capacity can be found for reasonably small n. 

It is instructive to first consider encodings £ that are 
isometric, a restriction that does not affect the regular (non- 
private) quantum capacity. Private entanglement transmission 
codes then simply become codes that transmit entanglement 
beyond Eve's horizon to E c . 

Taking the partial trace over (ab) instead of (cd) of the pure 
state \ip) from Eve's Fock space yields the channel Af c from 
Alice to E c , the Hilbert space describing degrees of freedom 
beyond Eve's horizon. The result is 

N c {p) = zd + (1 -z)lj , (7) 

where a — M(p) and ojq is a diagonal state independent of p. 
Therefore, given the output a to her channel, Eve can simulate 
the channel to E c up to complex conjugation. The simulation 
is simple. With probability z she does nothing to a and with 
probability 1 — z she prepares luq and uses it to replace a. 

Now suppose that it is possible to transmit entanglement 
(and therefore quantum states) beyond Eve's horizon. Write 
T>(t) — J2i DjTD\ for the decoding channel on E c . Since 
T>{t) = ^~2j DjrDj is also a quantum channel, Eve can apply 
T> to the output of her simulation. Assuming high fidelity 
transmission of a quantum state \t/j) beyond Eve's horizon, 
the output of V will be a high fidelity transmission of ■0). 
That is impossible because the map \ip) i— * \ip) the result 
of applying both decodings in parallel, is nonlinear. The only 
possible conclusion is that it must be impossible to transmit 
entanglement beyond Eve's horizon. It is therefore impossible 
to achieve private entanglement transmission using isometric 
codes. 

Releasing the restriction, however, yields a non-zero capac- 
ity. In fact, because I(A; E c ) p in Theorem [TJ is a concave 
function of (p A and the Unruh channel is covariant, the maxi- 
mum will be achieved with tp A maximally mixed. Evaluating 
the formula yields a compact expression for Q p (id, Af) which 
we have plotted in figure [2] 

1 / (1 - z) 3 d 2 d \ 

where Li (s, z) is the polylogarithm function. 

III. Private classical capacity 

Define the private classical capacity C p (A/i,A/2) as the 
optimal rate, measured in bits per channel use, at which Alice 
can send classical data to Bob over the channel Af\ in such a 
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Fig. 2. (a) The private quantum capacity Q P (id2,Af) is non-zero for 

(n) 

all positive accelerations and strictly less than C' p for all n, which 
give successively better lower bounds on the private classical capacity, (b) 
H{M(\tl}\)(ipi I)), the entropy of the output state for a pure input or, 
equivalently, the entanglement between Eve's output and Eve's environment. 
This is an intermediate quantity required in the evaluation of Cp 1 ' and 
was also the focus of [7], where it was approximated by diagonalizing the 
k = 0, 1 blocks of equation {2). Using our methods, it can be shown that the 
exact value of the entanglement is —3 [z In z/(l — z) + In (1 — z)] + (1 — 

z ) 2 -lklk U ( s ' z ) U=0 nats - 



way that Eve is incapable of distinguishing the messages based 
on her view, the output of the channel A^- This definition 
generalizes the notion of private classical capacity introduced 
in [9], which corresponds to the special case where A/2 is the 
complement of A/i. 

Using the methods of that paper and some addi- 
tional arguments, one can show that C p (id 2 , TV) = 



lim^ooC^id^AO, where Cp" ; (id 2 , AT) is 



l-H{M{I/2)) 



■max-ff(^ n (|^„XV'n|)) (9) 



be considered fully solved@ In the case of private classical 
data transmission, the problem of calculating the associated 
private classical capacity reduces to that of determining the 
maximal output entropy of the Unruh channel for pure input 
states. This entropy corresponds to the entanglement between 
Rindler field modes accessible to the eavesdropper and those 
not accessible, a question of independent interest [7] resolved 
in this paper. 

When evaluating the private quantum capacity with an 
accelerating eavesdropper, we began by considering isometric 
encodings, a class known to be sufficient for non-private 
quantum data transmission. With this restriction, private quan- 
tum data transmission reduces to sending entanglement be- 
yond the eavesdropper's horizon. An argument related to the 
impossibility of cloning demonstrates this to be impossible, 
an observation reminiscent of the analysis in [23], [24], 
where the interplay of the no-cloning theorem and horizons 
was used to place self-consistency constraints on the black 
hole complementarity principle. We ended by evaluating the 
private quantum capacity for unrestricted encodings, finding 
a compact expression for the capacity which is non-zero for 
all positive accelerations, in sharp contrast to no-go result for 
isometric encoders. 

Acknowledgments 

The authors thank John Preskill for reminding us of the 
dangers of preliminary calculations and Jon Yard for helpful 
conversations. This work was supported financially by the 
Canada Research Chairs program, CIFAR, FQRNT, MITACS, 
NRO, NSERC, Quantum Works and the Sloan Foundation. 



and \ip n ) is any pure input state to n copies of the channel. 
Evaluating the capacity therefore reduces to determining the 
maximal output entropy of the Unruh channels A/"®" for pure 
input states. The optimization for n — 1 is trivial due to the 
co variance of A/" and gives that C P (\&2,N) is bounded below 
by 



C«(id 2 ,A0 = (l-z) 2 ^ 



-^-Li(s,z) | s=0 
as 



(1 - z) 3 d 2 



^Li(s,z) | s=0 



(10) 



2 dz 2 

We plot these bounds for n = 1, 2 in figure [2] 
IV. Conclusions 



The assumption that an eavesdropper is accelerating can 
be exploited to send data securely for all non-zero acceler- 
ations. In the case of the private quantum data, we found a 
single-letter formula for the capacity for general eavesdropper 
channels, demonstrating it to be equal to the entanglement- 
assisted quantum capacity of the channel to the eavesdropper's 
environment. We leave it as an open question to explain why 
these seemingly unrelated tasks should have matching capacity 
formulas but note that in light of [21], these are now the only 
channel capacity problems in quantum information that can 
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